<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>This isn't a client issue, this is a server issue. The server is allowing me to bind to one user using another user's credentials. It's the server's responsibility to verify proper credentials on bind requests.</div><br><div><div>On Mar 6, 2014, at 6:17 PM, Paul Robert Marino <<a href="mailto:prmarino1@gmail.com">prmarino1@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">This is an issue with the LDAP search command which is part of the openldap project not 389 server.<br>That said I think it ignores the -X if you only have one cached credential and are using it in combination with the -Y GSSAPI option further more if you want it to prompt you for a password you need to add a -W<br><br><span style="font-family:Prelude, Verdana, san-serif;"><br><br></span></blockquote></div><br></body></html>